State-Mandated Age Signals Hit Devices

Illinois just ordered every phone, tablet, and computer to tell apps how old you are, locking age data into the operating system in the name of “protecting kids.”

Story Snapshot

New Illinois law forces devices to send an age bracket for every user to apps and websites.
Parents must enter kids’ ages at setup, which then triggers state‑mandated app restrictions and data rules.
Social media feeds, autoplay, late‑night notifications, and privacy settings for minors are now controlled by law.
Critics warn the state has built a device‑level tracking system that reaches far beyond “social media safety.”

Illinois Builds State-Mandated Age Signals Into Every Device

Governor J.B. Pritzker signed the Children’s Social Media Safety Act, House Bill 5511, making Illinois the first state to hardwire age checks into the operating systems of phones, tablets, and computers. By January 1, 2028, operating system providers like Apple, Google, and Microsoft must show a setup screen that forces the account holder to enter a birth date or age for the primary user. The system then places every user into one of four age brackets, including an “18 and over” bucket, and devices send that age bracket data as a signal to any app or website that requests it.

Under the law, this age signal is required for nearly all social media platforms and many other online services that operate in Illinois. When a device is set up for a child, parents must enter the child’s age, and that choice automatically activates state‑mandated restrictions inside apps. The governor’s office calls this an “age assurance” system and says it avoids direct ID scans or facial recognition, because apps receive only age‑range data instead of exact personal details. But the statute still compels operating systems to collect age information on every user and to share it across the app ecosystem.

What Changes for Kids’ Feeds, Notifications, and Privacy Settings

The law goes far beyond a simple age check and orders platforms to change how apps work for anyone under 18. For minors, social media feeds can no longer rely on algorithmic ranking that uses viewing history to keep kids scrolling; instead, feeds are limited mainly to content the child searches for, requests, or sees from accounts they follow. The act also requires stronger default privacy settings for minors, including shielding precise location and limiting digital currency transactions. Apps are barred from sending notifications to minors between 10 p.m. and 7 a.m., and autoplay for videos must be turned off by default for children.

These changes are meant to reduce addictive features and late‑night distractions for young users, and supporters frame the bill as “sweeping protections” to keep kids safe online. They point to growing concern about teen mental health and say design changes, not just parental rules, are needed to curb harmful behavior on social media. The Illinois Attorney General is charged with enforcement and can seek fines for each affected child when companies fail to follow the rules. Unintentional violations can bring thousands of dollars in penalties per child, with higher fines for intentional misconduct, putting serious state power behind the new framework.

Age Brackets, Device-Level Control, and Growing Privacy Concerns

The new system hinges on “age bracket data,” which the law defines as non‑personal data that tells apps whether a user is under 13, 13 to under 16, 16 to under 18, or at least 18 years old. While the governor’s team stresses that media outlets, email services, broadband providers, and learning platforms are excluded, the device‑level framework still covers a very wide range of consumer hardware and online services. Critics, including civil‑liberties advocates, warn that forcing operating systems to collect and broadcast age brackets for every resident could end anonymous device use in Illinois and expand government influence over digital life.

Groups like NetChoice argue the law “mandates” device manufacturers and operating system providers to collect birth dates, ages, and age bracket data from all users and to share that signal with covered app developers. The Electronic Frontier Foundation says this creates a sweeping age‑gating regime across nearly all internet‑enabled hardware and online services, not just social media. They worry that once the state forces companies to build these pipes, other lawmakers can later add new rules on what content different age groups may see or how data from minors and adults can be used, raising long‑term First Amendment and privacy risks.

Parents’ Role, Industry Pushback, and What Comes Next

The law’s system depends heavily on what parents enter at setup, and supporters admit that protecting kids “is entirely down to their parents” in practice. If a parent misstates a child’s age or a teen uses a shared device labeled as “adult,” the operating system will send the wrong age bracket, and the app will treat that user under the law as older than they really are. At the same time, the statute gives platforms a safe harbor: if a company relies on the age signal from the device, it is generally not liable when that age turns out to be wrong. That structure may reduce platform responsibility and shift more burden onto families.

Illinois’ governor has signed a law mandating social media apps to verify a child’s age via the device’s operating system beginning 2028 pic.twitter.com/q1ubcEB7RJ

— Interesting AF (@interesting_aIl) August 5, 2026

Technology industry groups and digital‑rights advocates pushed hard against House Bill 5511 before it was signed. They raised First Amendment concerns and warned about building a new data system that tracks age across apps, even if the data is framed as “non‑personal.” Despite that opposition, the bill passed the Illinois General Assembly unanimously, and the governor made it a top priority. Supporters see it as a model for other states to copy, while critics see a template for wider government control over devices, app design, and online speech, especially where age gates can be used to justify content filtering or access limits in the future.